createhashes.sh

在网络安全中经常会遇到rootkit

#!/bin/sh

# Temporary file for sorting the results
TMPFILE="`mktemp /tmp/rkhunter.createhashes.XXXXXX`" || exit 1

DIRS="/sbin /bin /usr/bin /usr/sbin"
FILES="find
cron
ifconfig
watch
w
whoami
who
users
stat
sha1sum
kill
find
file
pstree
killall
lsattr
mount
netstat
egrep
fgrep
grep
cat
chmod
chown
env
ls
su
ps
dmesg
kill
login
chkconfig
depmod
insmod
modinfo
sysctl
syslogd
init
runlevel
groups
ip"

for I in ${FILES}; do
	for J in ${DIRS}; do
		FILE="${J}/${I}"
		if [ -f ${FILE} ]; then
			./createfilehashes.pl ${FILE} >> ${TMPFILE}
		fi
	done
done

sort ${TMPFILE}

rm -f ${TMPFILE}

exit 0